Severity: : High
  CVE Kennungen: : CVE-2012-0870
  Advisory Date: 21 de июля de 2015

  DESCRIPTION

Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.

  INFORMATION EXPOSURE

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004962
  Trend Micro Deep Security DPI Rule Name: 1004962 - Samba 'AndX' Request Heap Based Buffer Overflow Vulnerability (CVE-2012-0870)

  AFFECTED SOFTWARE AND VERSION:

  • rim blackberry_playbook_os 1.0
  • rim blackberry_playbook_os 1.0.3
  • rim blackberry_playbook_os 1.0.5
  • rim blackberry_playbook_os 1.0.6
  • rim blackberry_playbook_os 1.0.7
  • rim blackberry_playbook_os 1.0.7.2942
  • rim blackberry_playbook_os 1.0.7.3312
  • rim blackberry_playbook_os 1.0.8.4985
  • rim blackberry_playbook_os 1.0.8.6067
  • rim blackberry_playbook_os 2.0
  • rim blackberry_playbook_tablet -
  • samba samba 3.0